For fun. More seriously I was interested for two things: 1) Policy framework - every policy framework has its own wacky way of specifying matches, and actions.

For fun. More seriously I was interested for two things: 1) Policy framework - every policy framework has its own wacky way of specifying matches, and actions. SQL turns out to be pretty good at this. 2) For some other projects I needed an in-kernel virtual machine. I needed something written in C, that had a no libc requirement. My choices were nekovm, and SQLite at the end. I decided to take out two birds with one stone.